Privacy Policy

1. Who is responsible for your information

STRATEGIA AGILE SOLUTIONS, INC., a Delaware corporation, is responsible for (the controller of) personal information collected through the Service.

Our affiliate STRATEGIA AGILE SOLUTIONS SIAAS S.A.S., based in Quito, Ecuador, supports delivery and commercial follow-up and may process personal information on our behalf and in line with this policy.

Privacy contact: info@siaas.ai

2. Information we collect

2.1 Information you provide

• Contact details: name, work email, phone number, job title and company name, when you request your report, a call or a meeting.
• Company profile: industry, region, company size and annual revenue range.
• Assessment inputs: operating costs, IT spend, headcount, average employee cost, SKU count, a short business description, readiness ratings, and the challenges and initiatives you select.
• Conversations: what you type into the AI chat assistant and what you say during a call with our AI voice assistant, Agatha.

2.2 Information collected automatically

• IP address and request data: used for security, rate limiting and to limit the free-assessment counter to one use per network per day.
• Bot-protection signals: device and interaction signals collected by Google reCAPTCHA to tell people from automated traffic.
• Usage analytics: aggregated page-view and performance data from Vercel Web Analytics, which does not use cookies.
• Server logs: technical records kept by our hosting provider, such as IP address, time and requested page.
• Language preference: stored in your browser's local storage.

2.3 Scheduling

If you book a meeting, Calendly collects the details you enter under its own privacy policy.

3. How we use your information

• Generate your assessment results and AI-assisted recommendations: to provide the Service you request.
• Email your report: when you ask for it.
• Place the AI voice call you request: and send our team a written summary of the conversation, based on your consent.
• Notify our team: when an assessment is completed or an initiative is viewed, so we can follow up. This relies on our legitimate interest in responding to business enquiries; you can ask us to stop at any time.
• Protect the Service: against abuse, fraud and automated traffic, based on our legitimate interest in security.
• Understand aggregate use and improve the Service: based on our legitimate interest.
• Comply with law and enforce our Terms: where required or permitted by law.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it to make decisions that produce legal or similarly significant effects about you. StrategIA does not use personal information from the Service to train AI models.

4. AI processing

• Assessment engine: your company profile and assessment inputs are sent to OpenAI to generate results. Your name, email and phone number are not included.
• Chat assistant: your messages are sent to Google's Gemini model through Vercel AI Gateway. Do not enter personal or confidential information you do not want processed.
• Voice assistant (Agatha): calls are run through Vapi, which receives your phone number, name, email, company and assessment context and processes the call audio in real time to hold the conversation. Calls are not recorded. StrategIA receives only a written summary of the conversation by email.

AI-generated results are preliminary and can be inaccurate. See our Terms of Service for how to use them.

5. How we share information

We share personal information only as described below:

• Service providers: Vercel (hosting, analytics and AI Gateway), OpenAI, Google (reCAPTCHA and the Gemini model), Vapi (voice calls), Upstash (security counters), our email service provider and Calendly (scheduling). They process information on our behalf to run the Service.
• Affiliates: STRATEGIA AGILE SOLUTIONS SIAAS S.A.S., under this policy.
• Legal and safety: when required by law or legal process, or to protect the rights, property or safety of StrategIA, our users or others.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this policy.

6. International transfers

StrategIA is a United States company and our providers process information mainly in the United States. Our affiliate in Ecuador may also access it. Where applicable law requires it, we take steps to ensure appropriate safeguards for these transfers. If your organization requires data to stay in a specific region, contact us before submitting information.

7. How long we keep information

• Assessment inputs and results: processed to generate your results. We do not keep them in a StrategIA database after your session.
• Emails with your contact details, report or call summary: kept for up to 12 months after your last interaction with us, unless a longer period is needed for an active business relationship or required by law.
• IP address for the free-assessment counter: deleted after 24 hours.
• Rate-limiting records: held in memory and cleared within 24 hours.
• Server logs: kept for a short period by our hosting provider.
• Language preference: stays in your browser until you clear its storage.

8. Cookies and similar technologies

We do not use advertising cookies. We use:

• Local storage: to remember your language.
• Google reCAPTCHA: which may set cookies needed to detect bots. Google's Privacy Policy and Terms of Service apply.
• Calendly: which may set cookies when you open the scheduler.

Vercel Web Analytics does not use cookies.

9. Security

We use encryption in transit, request validation, rate limiting, bot protection and access limited to personnel who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your rights and choices

Wherever you are, you can ask us to access, correct or delete your personal information, withdraw consent, or stop follow-up communications.

• United States: residents of states with privacy laws, such as California, may also request to know what we collect, receive a portable copy, and appeal our decision. We do not sell or share personal information or use it for targeted advertising, and we will not discriminate against you for exercising your rights.
• EEA, United Kingdom and Switzerland: you may also restrict or object to processing, request portability and complain to your local data protection authority.
• Ecuador: you may exercise your rights under the Ley Orgánica de Protección de Datos Personales and complain to the Superintendencia de Protección de Datos Personales.
• Brazil: you may exercise your rights under the LGPD and complain to the ANPD.

To make a request, email info@siaas.ai. We will verify your request and respond within 30 days, or within the period your local law allows. You may use an authorized agent where the law permits it.

11. Children

The Service is intended for business professionals and is not directed to anyone under 18. We do not knowingly collect information from children.

12. Changes to this policy

We may update this policy. We will change the date at the top and, for material changes, post a notice on the Service.

13. Contact us

STRATEGIA AGILE SOLUTIONS, INC., attention: Privacy. Email: info@siaas.ai. Phone: +1 (786) 744 4454.